When your vendor's vendor has sloppy security

According to BitSight, this kind of risk, which it dubs supply chain risk, is a growing problem. One in five financial institution vendors have at least one outdated desktop operating system like Windows XP on their network; this increases the likelihood of a security breach.